Hacker News new | past | comments | ask | show | jobs | submit login

With one difference: the reference count is usually stored inside the Object's pointer (taking advantage of the fact that allocations are 16-byte aligned so the lowest 4 bits are otherwise idle). This means that there's no storage overhead on the reference count.



So if you end up with more than a certain number of allocations you can write a memory pointer to any place you want, then execute the code there?

Because that does not at all sound like a huge exploit.




Consider applying for YC's Fall 2025 batch! Applications are open till Aug 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: